KONFYDENCE / CoMaSy

EMPLOYEE CYBERSECURITY PRACTICE

Train the next decision, not just the next quiz answer.

CoMaSy gives employees realistic choices involving payment requests, executive impersonation, supplier changes, account compromise and other social-engineering pressure. The aim is to build a repeatable habit: pause, verify independently and escalate when needed.

THE DECISION GAP

Employees need practice where trust, pressure and business continuity collide.

Real incidents do not arrive with a label saying ‘phishing’. A message may come from a real account. A caller may know internal details. A process exception may look reasonable. Decision rehearsal helps employees practise the verification step before the pressure is real.

01

Short practice

Use focused decision missions rather than adding another long course to the employee workload.

02

Role-relevant scenarios

Prioritise scenarios that match the cohort’s actual workflows, such as payments, payroll, supplier changes or privileged actions.

03

Immediate feedback

Explain why one response is stronger and reinforce the reusable verification principle behind the choice.

MEASUREMENT

Measure how the cohort responds, not whether they opened a lesson.

Pilot reporting can compare defined decision signals before and after targeted practice using materially varied scenarios.

Read the methodology →

BUYER QUESTIONS

What to know before you pilot it.

How long does a CoMaSy exercise take?

The pilot is designed around short scenario decisions rather than a long course. Exact duration depends on the agreed scenario set.

Can scenarios be role-specific?

A pilot can focus on relevant workflows and pressure patterns without promising an unlimited authoring platform.

Will employees be individually ranked?

Reporting granularity should be agreed before the pilot. Cohort-level reporting can be used where individual-level analysis is not required.

Does this replace policy or technical controls?

No. CoMaSy is a training and measurement layer, not a substitute for technical security controls, policy or incident response.

DEFINED COHORT. DEFINED METRICS. DEFINED DECISION POINT.

Test the use case before you scale it.

Request a CoMaSy Pilot →